An administrator is trying to access a server in a cloud via SSH but is unable to log in. The administrator determines the company's IP address has been blocklisted on the server. Which of the following should the administrator do to prevent being blocked in the future?

Question

Accepted Answer

C. Add the company's IP address from the /etc/hosts.allow. The /etc/hosts.allow file is the TCP Wrappers allowlist that controls which hosts can connect to network services. Adding the company's IP address to this file explicitly grants access, overriding any dynamic blocklist (such as fail2ban) and preventing future SSH denials caused by IP-based restrictions on the server.

Answer

A. Add the company's TLS certificate to the authorized_keys and known_hosts files. The authorized_keys and known_hosts files manage SSH public-key authentication and host fingerprint verification respectively, neither of which controls IP-based blocking or allowlisting.

Answer

B. Modify the cloud provider security rules to allow all connectors form the company's IP address. Modifying cloud provider security group rules to allow all connections from the company's IP is overly broad and does not address the server-side blocklist that caused the original SSH denial.

Answer

D. Turn on SELinux and enable the SSH context. SELinux enforces mandatory access control through security contexts and labels, not IP address allowlisting or SSH connection blocklists.

An administrator is trying to access a server in a cloud via SSH but is unable to log in. The administrator determines the company's IP address has been blocklisted on the server. Which of the…

Question

Options

How the community answered

Why each option

Topics

Community Discussion